Error: rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
File:                     wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json)
Hash identifier:          H/Ve1UfWHI23q/DhGjQmONXSGT+mX4ypQkTXC+zxCxA=
Subject key identifier:   73:83:C9:7A:AF:5A:F5:D3:EF:92:5B:8A:C7:EA:0D:81:4A:74:56:5F
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       05B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
Manifest number:          057D
Signing time:             Sun 11 Oct 2026 03:19:40 +0000
Manifest this update:     Sun 11 Oct 2026 03:19:40 +0000
Manifest next update:     Tue 13 Oct 2026 03:19:40 +0000
Files and hashes:         1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: YXBrJ7F2YNvKOf9B3tFHR14KMspBFJ7mCsW/xEQtoxA=)
                          2: F43D6930A83511F0BC8A38E7DAE4EC9C.roa (hash: XTw1rTEthgk2g59vYMTm9U70mr47Am47T/ne830ENLk=)
                          3: 11B79A8857ED11F0BB37DCB6DAE4EC9C.roa (hash: LGj0TGBQ9PlzMfbB8gss/Pg+nTIpWMAk3qHnGrpm+ig=)
                          4: FD479F26078711F19A82A8CFDAE4EC9C.roa (hash: wFeP3modvmH5Mhqjv+CC64SA6dnMkJLe/UIwelKEa48=)
                          5: 03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa (hash: Hero/puzDpVDLqxdHOb+QpKTo8YJgJsCdsLulnrwXls=)
                          6: 9EC7E0FC664011F099D444DEDAE4EC9C.roa (hash: T6NsArflMlR27ihl+RWlr6t/CZ4ImER2FSyy6Y2HGzo=)
                          7: 7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa (hash: SBSFhFouBWocCQSNhqhVWZk69czQ66awyzRm3+xF0V0=)
                          8: C8304A84A21111F1A664A5D1CE1D38B0.roa (hash: ivUSpFyOs/r2dCFruezEKqFqXQ5W2nFd0bc9uCW2iwE=)
                          9: 5C4B7E90A20911F181D8BD1CCF1D38B0.roa (hash: QrdT+xqtFl3yZHpW8BeEj5Duv/p3Lz6vxX+Y5zIxp8w=)
                          10: BB921280582A11F082413EC0DAE4EC9C.roa (hash: uNGXnDI1G5CyDUQ0B2eKBb7/gWeHJujLDgmvv6LRYik=)
                          11: F8703DBCA9D311F0864DDECEDAE4EC9C.roa (hash: Oja+SAFoxpQD5GTECGpSo4HMoaVvions272/uyxavdc=)
                          12: 875E0D6EA36311F0AA6DF4AEDAE4EC9C.roa (hash: 4efvNiFyfuNVE4eXc9fh1MtJHKt6dZYGX7ugnMN6zH0=)
                          13: 7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa (hash: Yv9EYVsOa8ZtIz8yIrYaEcrbV+1DlYyUsMHPDQ29rmo=)
                          14: 3ABDEDA8C9D311F0BBC22FD0DAE4EC9C.roa (hash: fSg/sb50cK4+NHvdy1oLUkkc0MWNwOOhrIgIiKfNPBI=)
                          15: 079ED4EED4ED11F0B23179DDDAE4EC9C.roa (hash: mQiwz+Lyy5Wnp4r5beDcoqvBfm5DT/2V6ah49ZEkaZA=)
                          16: B56BBAFEA8E411F0B7F402CFDAE4EC9C.roa (hash: Bla5/qlHkrSmFTwSMnkRCjGp7wHs2L6Dvpf24nq6H+s=)
                          17: 78BA33620CAB11F19F8C1DF0DAE4EC9C.roa (hash: EfhNEtZHgHwV8LkqrvptXWv59SROsB2B1QqIwRftAKo=)
                          18: 016C59AA582B11F0AEBD90C0DAE4EC9C.roa (hash: BQmO7rUNBXqX5CcwT82RJ6WRtMVErbG+OZzMCXemw38=)
                          19: 6E002B7A582911F081D681B7DAE4EC9C.roa (hash: CTaTj5YF4V+bg4KJYXYIAmso8T3i1fhFShVXU2Snf5k=)
                          20: 7585C434A36211F0B49A83AADAE4EC9C.roa (hash: mzEcLu+I7zJJUaAnBgEPPDoKGrDo3rYdMmkKp6vkaKk=)
                          21: F5D219905CAD11F0A4E9D9ACDAE4EC9C.roa (hash: E0mIDm1W7m6U3cc2aBTow4RrHyw/dh4ay5EbgUAHlvk=)
                          22: 21D354BA576211F098BCD5A6DAE4EC9C.roa (hash: 4xF4q1aGLDqPWO/lN87jtt4mzGDncXf1cKquoSVh8Jo=)
                          23: 639B8948582B11F09C9191C4DAE4EC9C.roa (hash: bR5HPR1uB5A3pUPtLMp4f5jA1hg81oOVbLGlF7vSFUE=)
                          24: 4DF5B646A83E11F0B115F29CDAE4EC9C.roa (hash: 1I4QlyRJtH58+FmbvgaBVwb8TmvTGwmLG/FBtNGEc2U=)
                          25: C2C1572A575B11F09F7D4F7FDAE4EC9C.roa (hash: oT7LXoUtdT1Oeg52MZHLEf/CMeovLLw6njnrby9Y2rA=)
                          26: 5F59381C737E11F0AE9654A5DAE4EC9C.roa (hash: +eQGH4JWW6JBqSSbTejgVwja+jvovxrHQh1cSQUlKf8=)
                          27: 6535223A5B2A11F084BE7DCFDAE4EC9C.roa (hash: E6XUO21M1WiWOfXgXoIJnViWEjPsKZ84YPJ9VFWP2jo=)
                          28: 74513D12A50C11F1BF7DBDDCCE1D38B0.roa (hash: KImqWuGcyK/xSqlvfkitwOsE6fNi/G1Sdbv0r9bpscE=)
                          29: 9517B13E6DEF11F086048BF0DAE4EC9C.roa (hash: EnBy4oFHyBx7vgZfUV3uQ+WB9FIGDXRiwzC8lkvrLEU=)
                          30: 3075B79AA83B11F08DE4178BDAE4EC9C.roa (hash: MTFce5WtJZPL9HdIzD6xgiNe/EZ7LlPCAda85tZnCIE=)
                          31: 577E3F28B40811F0A66FB7E7DAE4EC9C.roa (hash: dQbd5fRxrAAu/Hiu4+U2Iipe1G2HBR1VErL8Q9yTXkU=)
                          32: 5BFD5FF2628C11F08702BDA9DAE4EC9C.roa (hash: 3qER9AVYL3rqbEnQkEA/pNLjhLYQCepw4beWhWdIRqw=)
                          33: 4FC9F8B0582A11F0926B49BCDAE4EC9C.roa (hash: cJA24+0QFZHgLG+qNh475FbEtKunGho9e7RUrnJHRT4=)
                          34: 1D61636AAD9111F0B6C802E0DAE4EC9C.roa (hash: BBiMtDq1924b0zXtKlwj6WdODrF5fjfJCdIU/dUthSg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Oct 11 03:19:40 2026 GMT
            Not After : Oct 13 03:19:40 2026 GMT
        Subject: CN=6acb004c-ece6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:2a:1f:00:a7:1b:de:b6:9a:6a:fe:84:31:
                    0d:5c:50:6b:5e:5f:78:7c:64:46:d3:f7:9b:b0:d2:
                    6e:48:52:e1:ba:19:7a:1a:35:ed:a3:f0:fd:ee:b3:
                    95:64:5d:99:30:13:c9:1a:f2:4c:8d:11:30:31:07:
                    c1:e6:65:a7:e0:02:8d:9c:bb:e6:11:a0:d4:a4:ba:
                    a1:e1:ae:53:bf:07:64:70:bf:d8:ff:52:62:91:4c:
                    3b:af:87:7d:5d:2b:5e:f5:60:17:da:51:46:ec:16:
                    69:f6:d3:11:e0:34:31:45:df:96:e6:a5:2f:71:d5:
                    5f:52:9c:18:74:9a:d7:8d:a3:6d:84:a6:57:4a:1f:
                    ef:1d:80:3a:0c:c5:ed:f1:36:75:4e:c2:a0:6c:b2:
                    c1:b0:27:93:44:be:ee:d6:c4:46:0b:87:58:fe:ed:
                    34:5a:d0:5f:aa:0a:d3:67:5a:ac:31:02:95:df:2f:
                    43:21:6b:b5:7a:5f:5e:5c:70:ce:4a:83:46:82:4d:
                    da:11:1e:7c:76:15:f1:54:7c:43:cb:9c:46:93:72:
                    4f:5b:f1:84:7d:c8:88:42:6f:eb:fd:90:9d:8f:ab:
                    0d:2d:0f:11:8f:15:81:72:33:21:3d:5c:77:b1:04:
                    63:a4:4d:6a:bd:ae:5e:30:dc:39:ba:eb:47:f8:10:
                    12:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:83:C9:7A:AF:5A:F5:D3:EF:92:5B:8A:C7:EA:0D:81:4A:74:56:5F
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:9b:f3:e5:f8:96:bf:db:34:24:bd:b4:d4:f4:ec:15:c9:69:
         d2:6d:69:d6:5f:7a:55:cb:3a:06:2a:9c:4e:b6:44:07:ad:c9:
         be:16:b1:70:51:0c:f2:4c:95:4e:ef:c0:9b:f8:fe:c5:fb:c4:
         ea:f3:8c:59:18:3b:28:51:5e:2b:74:e7:3f:88:83:ef:d7:19:
         ac:5c:33:2d:d4:d1:a6:22:dd:12:69:6d:e8:3a:e0:02:f3:a0:
         7c:93:53:2a:e8:7c:6d:4b:7a:41:d3:f3:fa:86:07:4f:12:30:
         3d:a5:78:d1:77:14:0d:00:e5:98:99:a7:dd:7a:2e:1b:69:ef:
         17:17:5d:53:0f:b9:75:ba:13:d3:49:db:78:b2:bb:0f:f5:b6:
         dc:4e:b5:9f:80:35:3c:fa:0c:fc:61:63:52:16:17:80:af:30:
         99:d6:a8:32:be:f9:ce:01:6e:82:bd:2a:61:a9:f2:f8:41:ef:
         14:12:26:a7:2e:4b:85:f8:34:f4:ce:9e:58:0a:c6:61:bc:36:
         7c:a4:21:e1:85:bd:8e:b3:54:9a:69:df:7a:b6:66:a0:82:13:
         47:ab:aa:9e:18:f6:44:10:08:5c:2b:2d:20:f9:b7:91:ad:3f:
         a1:d4:a3:7a:8d:ee:6f:77:91:61:a1:15:12:9d:9c:76:08:42:
         05:8b:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:48:25 2026 by rpki-client